<%@ page contentType="text/html;charset=GB2312" import="java.sql.*,control.database.*"%>
<%
String username=request.getParameter("username");
String password=request.getParameter("spassword");
String companyno ="0";// request.getParameter("sCompanyName");
String branchno[];
//branchno = new String [2];
//branchno = companyno.split(",");
//session.setAttribute("branchno",branchno[0]);
//session.setAttribute("subcenterno",branchno[1]);

String sql = "select * from cq_cmn_userinfo where uname='" + username + "' and upsd='" + password + "' and branchno='0'";
if(username!=null && username!="" && password!=null && password!="")
{
	DataBase db = new DataBase();
	ResultSet rs = null;
	rs = db.executeQuery(sql);
	if(rs.next())
	{
		response.sendRedirect("../ext_index.jsp");
	}
	else
	{
		response.sendRedirect("error.html");
	}
}
%>